eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

heph Authentik: add empty redirect_uris (required by provider serializer)

Browse source 
The OAuth2 provider serializer requires redirect_uris even for a public
device-code client; its absence failed blueprint validation atomically.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-06-05 06:06:10 -07:00
commit 82c37e0f78
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
argocd/manifests/authentik/configmap-blueprint.yaml
View file

@ -477,6 +477,9 @@ data:
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]] invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_type: public client_type: public
client_id: heph client_id: heph
# Device-code (RFC 8628) + PKCE use no redirect, but the provider
# serializer requires the field — an empty list satisfies it.
redirect_uris: []
signing_key: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]] signing_key: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]]
property_mappings: property_mappings:
- !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]] - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]